Privacy statement

1. Controller

Name: Hakonen Solutions Oy

Business ID: 2207997-9

Address: Tulkintie 29, 01740 Vantaa

E-mail: tietosuoja@hakonen.fi

This privacy statement describes how we process the personal data of our customers. If you have any questions, you can always contact us using the e-mail address above.

2. Name of the data file

Personal data file for the customer information in Hakonen Solutions Oy’s home delivery and installation services.

3. Purpose and legal basis for processing personal data

The purpose of processing personal data is to contact the customers using the service, implement the service ordered by the customer at the requested time and to provide customer service. The data are also used statistically for developing the services. We also offer to our customers an online tracking service for furniture home deliveries. In the service, the customer can choose the delivery time and give additional information and instructions on the delivery.

The legal basis for processing personal data is implementing the service ordered by the customer, as specified in the agreement between the customer and the furniture vendor. The main source of personal data is the vendor company that provides the service to the customer. The service cannot be implemented without processing personal data. With regard to certain groups of personal data, the processing is based on the controller’s legitimate interest. Examples include customer feedback that is processed for the purpose of developing the services. According to the controller’s evaluation, this processing of personal data is justifiable, taking into account the basic rights and freedom of the data subject. The controller has a legal obligation to process and store certain data under the Accounting Act.

4. Personal data processed by the controller

The following personal data are processed in the data file:
The customer’s name and contact information Information on the delivered content
Information on the delivery location and time Any additional information given by the customer
Feedback information

5. Recipients or recipient groups of personal data

Personal data is not disclosed to third parties. Personal data can be disclosed to authorities to the extent permitted and required by legislation. The processing of personal data is partly based on Microsoft Azure cloud services. More information on Azure can be found at: https://azure.microsoft.com

6. Transfer of personal data to third countries

If personal data is transferred to processing outside of the EU/EEC, the transfer is covered by appropriate agreements and, if necessary, the standard contractual clauses of the European Commission are used. More information on the clauses is available at: https://eur-lex.europa.eu/legal- content/EN/TXT/?uri=CELEX:02010D0087-20161217

7. Personal data retention period

Personal data are stored for the duration of providing the service and for a reasonable time afterwards in order to investigate any issues related to the delivery. However, the maximum retention period is two (2) years, unless the data need to be stored for longer on other justified grounds, such as under the Accounting Act.

8. Rights of data subjects in the processing of personal data Right to inspect data

The data subject has the right to inspect their personal data stored in the data file and receive a copy of the data. When the data subject makes the inspection request, they must provide the information needed for finding the data.

The inspection request can also be sent via e-mail to: tietosuoja@hakonen.fi

The reply to the request will be sent to the person making the request by mail or e-mail.

Right to rectify data

The controller ensures, to the best of its abilities, that the personal data it processes are accurate. The controller rectifies, removes or completes any incorrect or unnecessary personal data on its own initiative or at the request of the data subject.

Right to restrict processing

The data subject has the right to have the controller restrict the processing, for example, if the data subject contests the accuracy of the personal data. In this case, the processing is restricted for as long as the controller can ensure the accuracy of the data.

Right to request erasure or object processing

The data subject has the rights to object to the processing of their personal data when the processing is based on legitimate interests. However, the objection always requires a special personal situation.

Right to transfer personal data between systems

The data subject has the right to receive the personal data they have given to the controller in a common mechanical format and the right to transfer the data to another controller, if this is technically possible. This right is valid when the processing is based on consent or agreement and the personal data are processed mechanically.

Right to lodge a complaint with a supervisory authority

The data subject can lodge a complaint about the processing of their personal data to the supervisory authority, the Data Protection Ombudsman, on the authority’s website at www.tietosuoja.fi/en.